GoldRoger
22 posts
Full incident report on what happened is now live. Some highlights: No team member accounts were compromised. In the end, this was completely on a domain service provider, which has accepted full responsibility. We will be refunding all users 110% of the money that was stolen, meaning they will receive 10% more than they lost to make up for the situation. Now an uphill battle begins to restore trust.
BONKfun is back and here’s what happened 👇 On March 11, the BONKfun website was hijacked by a malicious actor via a social engineering targeting our domain service provider. This resulted in the domain being transferred to an external registrar. The domain service provider has accepted responsibility for transfer, and we have confirmed this incident was not the result of any compromise of BONK or BONKfun internal systems, codebase, or team accounts. Upon identifying the breach, we immediately took action to: 1) Disable the site 2) Coordinate with wallet providers to flag the domain as malicious 3) Contain further user impact We’d like to thank @phantom, @solflare, @MetaMask, @_SEAL_Org and all other security partners that helped spread the word quickly. We estimate the total customer losses at $30,000 and we will be reimbursing affected users at 110% of losses to account for opportunity cost. As a result of this social engineering on the domain service provider, the BONKfun domain was transferred to an external registrar, and that transfer greatly inhibited our ability to move quickly with relaunching the site in a secure manner. The domain and domain registration were fully transferred back around 5:00 pm Eastern time on 3/18. Full functionality with major wallet providers was restored late on 3/19, which has now enabled us to safely and securely relaunch the site. The main BONKfun domain is still experiencing flags from several antivirus software providers, we are working to remove these flags as soon as possible. For users experiencing issues with BONK.fun due to anti-virus software, letsBONK.fun is also live now and contains the same functionality as the main site.
